Skip to content
Threat Feed
Subscribe

Product

PhpList (< 3.6.17)

1 brief RSS
high advisory

CSRF Vulnerability in phpList Mass Subscriber Removal

phpList versions prior to 3.6.17 are vulnerable to CSRF, allowing an attacker to force an authenticated administrator to delete or blacklist subscribers without authorization.

phpList web-vulnerability csrf patch-management
1t 1c